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Privacy and Surveillance-Based Biometrics: 

Pushing Boundaries 




Surveillance and Informed Consent 


• Approximately 30,000 - 40,000 fixed 
surveillance cameras in Sydney 

Sydney Morning Herald 2007 

• Sydney trains awards contract in 2016 for 
11,400 CCTV cameras 
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What’s next? 
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Surveillance and Biometrics 


Age, Gender, 
Ethnicity 


• Facial recognition 

Usage: 

• Customisation of user 
interface 

• Statistics analysis 

• Grouping/targeting 


Anonymous 

Monitoring 


• Face/voice recognition, 
pattern recognition, 
gait recognition 

Usage: 

• Track movement 

• Monitor activities 

• Determine 
relationships 

• Build gallery of 
unknown individuals 


Identification 


• Face, voice, iris 
recognition 

• Link anonymous 
person to known 
identity (e.g., credit 
card) 

Usage: 

• Identify persons of 
interest (watch list) 

• Targeted treatment 
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Biometrics and Continuous Authentication 



Gesture identification 



Voice identification 
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People want to be gatekeepers of their personal data 
but in a world where we have less and less control 

Concern is rising 




Is it just a matter of weighing the pros and cons? 


Benefits 

• Enhanced safety and security 

• Customised service 

• Ease of doing business 



Dangers 

• Function creep abuse 

• Breaches / identity theft 

• Erroneous identification 
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Or should we let the majority decide? 


Unisys 
Security — 
Index 


NATIONAL 

SECURITY 

NATIONAL 

SECURITY 

Your Country’s national 
security in relation to war 
or terrorism 


DISASTER/ 

EPIDEMIC 

A serious natural disaster 
occurring in Your Country 

FINANCIAL 

BANKCARD 

FRAUD 

Other people obtaining 
and using your credit or 
debit card details 

SECURITY 

FINANCIAL 

OBLIGATIONS 

Your ability to meetyour 
essential financial 
obligations 

INTERNET 

SECURITY 

VIRUSES/ 

HACKING 

Computer and Internet 
security in relation to 
viruses, unsolicited 
emails or hacking 


ONLINE 

TR AN S ACTI O N S 

The security of shopping 
or banking online 

PERSONAL 

IDENTITY THEFT 

Unauthorized access to, 
or misuse of your 
personal information 

SECURITY 

PERSONAL 

SAFETY 

Your overall personal 
safety over the next 6 
months 
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Poll consumer concerns 
across: 

• 4 areas of security via 

• 8 questions 

• Calculate score 0-300 



Unisys Security Index 
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Australian Security Concerns are High and Rising 
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Top Security Concerns - Australia 


Data privacy issues 
remain the top security 
concern for Australians 


How concerned are you about the following issues 

Extremely or Very Concerned 


Identity Theft 
Bankcard Fraud 
Viruses/Hacking 
National Security 
Online Transactions 
Financial Obligations 
Disaster/Epidemic 
Personal Safety 


58% 

55% 

54% 

54% 

44% 

43% 

38% 

30% 


UNiSYSI TomSrow^ 1 ^ 


© 2016 Unisys Corporation. All rights reserved. 


How do Australians feel about biometrics? 


Please say whether you support or don’t support the following scenarios 


Staff wearing facial recognition glasses to identify VIP customers to 
greet them by name and recommend products/services based on... 

Employers giving employees fitness trackers to track their 
movements or heart rate stress levels while in the workplace 

Fingerprint scanners on smart watches to authorize payments made 

via the smart watch 

Airline staff wearing facial recognition glasses to confirm passenger 
identities as they board the aircraft instead of queuing to have their.. 

Fingerprint scanners on smart watches to control who can access the 
information it has captured (e.g. your location or physical activity) 

Medical devices such as pace makers or blood sugar sensors that 
transmit any significant changes to their doctor 

Police or border security staff wearing facial recognition body worn 
cameras to identify criminals or terrorists who are on watch lists... 


50% 


21% 

29% 

48% 


21% 

32% 

32% 

21% 


48% 

28% 

22% 


50% 

26% 

22% 


52% 

12% 14% 


74% 


13% 12% 


75% 



Unisys Security Index -Australia (2017) 

■ I support this ■ Don’t know ■ I do not support this 
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Should a vocal minority decide for the majority? 

X AM WHEEL. HEAR ME SQUEAK. 



Do the desires of the few outweigh the desires of the many? 
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How to deal with risks? 
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Risk Transfer 
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End Users 


Solution 

Providers 


Government I Solution 
Regulators I Operators 


Risk Transfer / Share 


Share risk with End Users: 


• Informed Consent 

• Opt-in / Opt-out 

• Recommended/enforced security measures 


Share risk with Solution Providers: 


• Shared Liability 

• Mandatory standards for duty of care 

• Penalties for non-compliance 
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Role of Biometrics Institute - Privacy Guidelines 



Purpose: 

Guide all stakeholders 

Assure the public 

Guide for all countries 
and jurisdictions 
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1 . Respect for Individuals/data subject privacy 

2. Proportionality 

3. Informed Consent 

4. Truth and Accuracy in Business Operations 

5. Protection of Biometric Data Collected 

6. Complaints and Enquiries 

7. Purpose 

8. Non-discrimination 

9. Accountability 

10. Sharing of Biometric Data 

1 1 . Provision of Advance Warnings of Surveillance 

12. Transmission of Biometric Data beyond National Boundaries 

13. Employee Biometric Data must be Protected 

14. Limit the Extent of Personal Data Exchanged and Retained 

15. Maintain a Strong Privacy Environment 

16. Individual Participation / Subject Access 
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Risk Reduction 





S Compliance with applicable laws and regulations 

S Compliance with Biometrics Institute Privacy 
Guidelines 

S Go the extra mile to protect biometric data against 
unauthorised access 

• Authorised Users vs Zero Trust Model 

• Assume internal environment is hostile 

• Assume external hackers will get in 

• Assume operators and end users are the weak link 

• Implement strategies to deter and contain breaches 
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Key Take-Aways. . . 




The convergence of surveillance and identification is 
happening faster and broader than can be managed by 
i privacy legislation - personal privacy is at grave risk! 



When considering new biometric applications, avoid the 
extremes of risk intolerance and risk ignorance - focus first 
on risk sharing and risk management 



Ensure that biometric solutions respect and protect the 
privacy of the individual using technology designed to protect 
the most sensitive data against the most challenging threats 
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Want to know more? 


Download the Unisys Security Index Australia and global reports 

www.unisys.com/unisys-securitv-index/australia 


For information on Unisys security solutions 

visit email 

www.unisvs.com/securitv lnfo-Security@unisys.com 


Join the conversation Biometrics Institute Privacy Guidelines 

#Unisys #Security Index http://www.biometricsinstitute.org/pages/privacv-charter.html 
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Thank You 



